Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/GkF55vtR4iBD7YT7nUsxuF1ZIAM.roa
File:                     GkF55vtR4iBD7YT7nUsxuF1ZIAM.roa (raw, json)
Hash identifier:          UnTgXCGpwuiI+eJHv1xFgSDM+VxnSc8MmLId9FZnGjA=
Subject key identifier:   1A:41:79:E6:FB:51:E2:20:43:ED:84:FB:9D:4B:31:B8:5D:59:20:03
Certificate issuer:       /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial:       0FED9742
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/GkF55vtR4iBD7YT7nUsxuF1ZIAM.roa
Signing time:             Sat 01 Jan 2022 02:02:00 +0000
ROA not before:           Sat 01 Jan 2022 02:02:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204601
IP address blocks:        185.182.82.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267228994 (0xfed9742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
        Validity
            Not Before: Jan  1 02:02:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1a4179e6fb51e22043ed84fb9d4b31b85d592003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:98:3b:24:71:ba:5a:88:3d:ec:25:b0:17:
                    cd:51:c7:66:df:4a:0f:d3:fb:f2:e1:df:b7:44:76:
                    cd:51:43:e2:12:50:1d:03:26:47:03:a3:94:65:57:
                    60:05:69:3b:57:ba:0b:c7:64:28:96:67:d0:87:c3:
                    be:20:81:2b:16:95:01:78:4a:e4:d9:87:d7:1d:cc:
                    1d:df:0a:70:8e:fa:c7:79:e6:13:57:e3:ca:45:dd:
                    a5:54:27:f1:5e:6e:fb:02:11:87:68:da:7b:ca:c1:
                    01:93:ce:dd:0f:ac:11:1a:d3:d8:e5:4f:2f:1f:79:
                    cf:9d:64:11:00:61:0c:1d:1d:d6:02:3c:e9:d7:00:
                    ac:6f:c2:17:01:81:34:76:5d:bf:19:68:02:09:8e:
                    a7:1f:a4:b7:69:14:d2:1a:a7:46:dc:c4:bb:6b:33:
                    08:18:d9:2c:bc:1d:f9:1e:b2:f7:7f:4f:99:b0:0b:
                    0f:6e:11:57:7d:9a:1f:d6:a1:4c:df:15:f8:8d:9e:
                    8d:25:85:af:ca:00:99:e8:55:af:b2:57:93:65:56:
                    b1:56:41:92:0a:c6:c9:32:07:68:f0:41:df:21:68:
                    a7:ee:8f:1d:9c:82:b8:5e:e3:5b:10:40:7e:2d:4b:
                    3c:af:98:c7:8d:db:94:ee:7f:d6:1c:bd:4c:a9:8f:
                    75:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:41:79:E6:FB:51:E2:20:43:ED:84:FB:9D:4B:31:B8:5D:59:20:03
            X509v3 Authority Key Identifier:
                keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/GkF55vtR4iBD7YT7nUsxuF1ZIAM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:5c:ef:71:7e:6b:46:11:f9:81:d3:d3:76:d4:15:cc:85:ea:
         20:57:12:a5:5f:29:42:1f:d3:4a:67:59:a2:c5:18:27:b2:d1:
         6d:de:d8:de:82:65:ac:5a:2a:4a:95:dc:f8:f0:50:d5:95:33:
         88:34:69:10:c8:93:b5:08:65:3b:43:5d:f0:92:ee:f0:cd:e0:
         14:8c:b8:53:a7:f3:3e:7c:25:53:b5:bb:65:5b:53:06:f6:74:
         22:e3:59:53:cc:9d:99:57:2b:95:ff:52:64:a9:37:83:de:be:
         7a:62:c7:c6:51:83:a3:a1:fa:ca:b9:b0:10:bb:50:fa:2c:41:
         4d:7a:1c:22:ba:dd:39:11:c7:c9:b6:42:8e:64:7d:70:b9:08:
         43:01:26:30:2d:57:4e:56:00:f0:c1:10:cd:f6:9b:1a:3c:a8:
         a8:c8:a9:4c:a8:82:c2:36:6c:84:8c:fd:a4:9d:b5:f0:b0:6f:
         4d:08:72:5a:57:17:2b:df:e0:1d:42:61:6e:0e:71:02:7e:e5:
         5a:8c:3c:9c:62:ba:35:d5:09:7b:96:c3:2d:ea:70:6d:c1:39:
         f6:8f:36:78:c7:56:ba:44:ce:40:38:dd:eb:43:ac:df:83:57:
         24:c3:60:33:25:d4:77:e5:48:76:8a:f8:21:f5:0e:bf:33:bc:
         2f:4e:dd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:37 2024 by rpki-client on console-fra.rpki-client.org